CVE-2026-52794

Katalog CVE

CVSS 7.5 · High EPSS 0,47%

Kerentanan Inefficient Regular Expression Complexity pada sentry. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Sentry's event ingestion pipeline, where a regex applied to attacker-controlled fields on incoming events can be made to consume disproportionate CPU time. This vulnerability is fixed in 26.5.2.

Rincian

Terbit di NVD

24 Juni 2026

Terakhir diubah

27 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/getsentry/sentry/security/advisories/GHSA-jjqr-wqg2-p856 mitigasi · advisory vendor
• https://github.com/getsentry/sentry/pull/116587 issue tracking · patch